Module encryption 

Encryption layer for data at rest.

• AES-256-GCM for encrypting content columns
• Argon2id for deriving encryption keys from user passphrase
• Per-record unique nonce generation

Structs

Encryptor

Encryption key manager.

Enums

EncryptionError

Errors from the encryption layer.